CVE-2015-6816 ganglia-web before 3.7.1 allows remote attackers to bypass authentication.
CriticalCVSS 9.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ganglia-web before 3.7.1 allows remote attackers to bypass authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ganglia(Debian:12) | < 3.6.0-1 | 3.6.0-1 |
| debian/ganglia(Debian:14) | < 3.6.0-1 | 3.6.0-1 |
| debian/ganglia(Debian:14) | = 3.1.0-1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.1-1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.1-2 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.1-3 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.2-1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.2-2 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.2-2.1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.2-3 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.2-3.1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.7-1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.7-1+squeeze1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.7-2 | No fix listed |
| debian/ganglia(Debian:14) | = 3.1.7-2.1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.3.5-1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.3.5-2 | No fix listed |
| debian/ganglia(Debian:14) | = 3.3.8-1 | No fix listed |
| debian/ganglia(Debian:14) | = 3.3.8-1+nmu1 | No fix listed |
| debian/ganglia-web(Debian:12) | < 3.7.5+debian-1 | 3.7.5+debian-1 |
| debian/ganglia-web(Debian:12) | = 3.5.2-1 | No fix listed |
| debian/ganglia-web(Debian:12) | = 3.5.2-2 | No fix listed |
| debian/ganglia-web(Debian:12) | = 3.5.8-1 | No fix listed |
| debian/ganglia-web(Debian:12) | = 3.5.8-2 | No fix listed |
| debian/ganglia-web(Debian:12) | = 3.5.8-3 | No fix listed |
Show 35 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ganglia-web(Debian:12) | = 3.5.8-3.1 | No fix listed |
| debian/ganglia-web(Debian:12) | = 3.5.8-4 | No fix listed |
| debian/ganglia-web(Debian:12) | = 3.6.1-1 | No fix listed |
| debian/ganglia-web(Debian:12) | = 3.6.1-2 | No fix listed |
| debian/ganglia-web(Debian:12) | = 3.6.1-3 | No fix listed |
| debian/ganglia-web(Debian:12) | = 3.6.1-3.1 | No fix listed |
| debian/ganglia-web(Debian:13) | < 3.7.5+debian-1 | 3.7.5+debian-1 |
| debian/ganglia-web(Debian:13) | = 3.5.2-1 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.5.2-2 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.5.8-1 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.5.8-2 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.5.8-3 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.5.8-3.1 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.5.8-4 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.6.1-1 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.6.1-2 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.6.1-3 | No fix listed |
| debian/ganglia-web(Debian:13) | = 3.6.1-3.1 | No fix listed |
| debian/ganglia-web(Debian:14) | < 3.7.5+debian-1 | 3.7.5+debian-1 |
| debian/ganglia-web(Debian:14) | = 3.5.2-1 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.5.2-2 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.5.8-1 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.5.8-2 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.5.8-3 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.5.8-3.1 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.5.8-4 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.6.1-1 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.6.1-2 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.6.1-3 | No fix listed |
| debian/ganglia-web(Debian:14) | = 3.6.1-3.1 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
| ganglia-web | <= 3.7.0 | No fix listed |
| ubuntu/ganglia(Ubuntu:26.10) | All versions | No fix listed |
References
- Debian Security Tracker CVE-2015-6816 vendor-advisory
- FEDORA-2015-de8ba28354 third-party-advisory vendor-advisory
- FEDORA-2015-accdc7ebfc third-party-advisory vendor-advisory
- FEDORA-2015-ee7a2b5844 third-party-advisory vendor-advisory
- [oss-security] 20150905 Re: CVE request: Ganglia-web auth bypass exploit mailing-list vdb-entry
- 92146 third-party-advisory vdb-entry
- bugzilla.redhat.com exploit issue-tracking third-party-advisory vdb-entry
- github.com third-party-advisory
- www.freshports.org patch third-party-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- bugs.debian.org issue-tracking